[policy-charter] Updates to the charter doc

Aaron Campbell acampbell at duosecurity.com
Thu Aug 10 16:50:25 UTC 2023


Hi all,

I'm not sure I ever properly introduced myself, but I work in the Cisco
Security Business Group, primarily on interactive user authentication,
especially as it relates to secure access. Policy is a big topic for us,
both from an authorization as well as authentication angle, and I hope we
can bring a unique perspective.

Appreciate all the great dialog today around a very complex topic, although
it does seem we are still spinning our wheels a bit.

We touched on this briefly at the first meeting, but I'd urge an evaluation
of the existing technologies and choose one to foster and build upon,
rather than treat all of the current systems as equally worthy of being
supported by an interoperability-focused standard. That just seems way too
hard given the fluidity of the space and the differing capabilities, as was
already mentioned. Plus it feels like you'd end up in a place where the
standard only supports the lowest common denominator instead of the more
advanced features that already exist.

I expanded on these thoughts a bit at the end of the charter doc, if anyone
has thoughts. I haven't participated much in standards bodies in the past
and eager to learn more from all of you. :)

-Aaron
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/policy-charter/attachments/20230810/5e90f5f9/attachment.html>


More information about the policy-charter mailing list